Tag: OAuth
Critical RabbitMQ bug exposes OAuth secrets to unauthenticated attackers
A high-severity flaw in RabbitMQ lets attackers steal OAuth secrets from the management interface without authentication.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
RabbitMQ flaws could leak OAuth secrets and expose cross-tenant queue metadata
Two RabbitMQ access control flaws could leak OAuth secrets and expose cross-tenant queue metadata
Device Code Phishing Campaigns Exploit Microsoft Authentication Flow
Cybercriminals are using Microsoft's OAuth device authorization flow to steal authentication tokens through phishing campaigns that bypass traditional security tools.